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DETAILED ACTION 

Response to Amendment 

1 . Receipt of Applicant's Amendment filed 12/04/08 is acknowledged. 

EXAMINER'S AMENDMENT 

2. Authorization for this examiner's amendment was given in a telephone interview 
with Mr. Robert M. Bain (RN 36,736) on March 9, 2009. 

An examiner's amendment to the record appears below. Should the 
changes and/or additions be unacceptable to applicant, an amendment may be 
filed as provided by 37 CFR 1.312. To ensure consideration of such an 
amendment, it MUST be submitted no later than the payment of the issue fee. 

The application has been amended as follows: 

Claim 1 (currently amended): A method of organizing web log data prior to storing 
the web log data, said method comprising: 

accessing configuration information associated with the web log data, said 
configuration information including at least one expression for defining a plurality 
of log files; 

creating and opening at least one web log file based on the configuration 
information, wherein the web log file is one of the defined plurality of log files; 
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creating and opening an error log file based on the configuration 
information, wherein the error log file is one of the defined plurality of log files, said 
error log being different than the web log file; 

receiving the web log data from a web server, said received web log data 
being in a format defined by the web server; 

evaluating the expression from the accessed configuration information, said 
evaluation of the received web log data occurring prior to the storing of the web log 
data; 

storing a first portion of the received web log data in the opened web log file 
in accordance with the evaluated expression without modifying the format of the 
received web log data defined by the web server, wherein the evaluated 
expression yields a condition associated with the stored first portion of the 
received web log data; and 

storing a second portion of the received web log data in the opened error 
log file without modifying the format of the received web log data defined by the 
web server, wherein the evaluated expression does not yield the a condition 
associated with the stored second portion of the received web log data. 

Claim 2 (previously presented): The method of claim 1, further comprising 
formatting the web log data in accordance with the accessed configuration 
information prior to storing the web log data. 



Application/Control Number: 10/748,716 Page 4 

Art Unit: 2163 

Claim 3 (currently amended): The method of claim 1 , wherein receiving the web 
log data comprises receiving clickstream web log data and the condition 
associated th e r e w i th with the stored first portion of the received web log data from 
[[a]] the web server, and further comprising dividing the received clickstream web 
log data into a plurality of portions based on the expression evaluated based on 
the received condition. 

Claim 4 (canceled). 

Claim 5 (original): The method of claim 1, further comprising receiving the 
configuration information from a user. 

Claim 6 (original): The method of claim 1, wherein accessing the configuration 
information comprises reading configuration information from a central hierarchical 
database. 

Claim 7 (original): The method of claim 1, further comprising maintaining a history 
of evaluated expressions to track a sequence of the evaluated expressions. 

Claim 8 (previously presented): The method of claim 7, wherein the web log data 
is received from a computing device, and wherein maintaining the history 
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comprises storing a cookie associated with the computing device, said cookie 
including the sequence of the evaluated expressions. 

Claim 9 (original): The method of claim 1, wherein evaluating the expression 
comprises recursively evaluating portions of the expression using the condition. 

Claim 10 (previously presented): The method of claim 1 , wherein the web log_data 

is received from a computing device and further comprising: 
authenticating the computing device; and 
opening a plurality of files to store the received web log data. 

Claim 11 (previously presented): The method of claim 1, wherein storing the 
received web log data comprises: 

preparing column web log data responsive to the received web log data and 
the evaluated expression; and 

storing the prepared column web log data in a file. 

Claim 12 (currently amended): The method of claim 1, wherein evaluating the 
expression comprises: 

forwarding the received web log data to a filter component to evaluate the 
expression using the condition associated with the stored first portion of the 
received web log data : and 
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receiving the evaluated expression from the filter component. 

Claim 13 (previously presented): The method of claim 1, further comprising 
sampling the received web log data prior to storing the received web log data. 

Claim 14 (previously presented): The method of claim 1, wherein said receiving 
the web log data and said evaluating the expression occur in real-time. 

Claim 15 (previously presented): One or more computer storage media having 
computer-executable instructions for performing the method recited in claim 1 . 

Claim 16 (currently amended): One or more computer storage media having 
computer-executable components for filtering web log data prior to storing the_web 
log data, said components comprising: 

a configuration component to access configuration information associated 
with the web log data, said configuration information including at least one 
expression; 

an interface component to receive web log data from a web server, said 
web log data including at least one condition, said condition being associated with 
the web log data and affecting storage thereof, said received web log data being in 
a format defined by a web server; 
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an expression component to evaluate the expression accessed by the 
configuration component based on the condition received by the interface 
component, wherein the expression specifies one or more operations for 
organizing the received web log; 

a storage component to store the at least a portion of the received web log 
data received by the interface component in accordance with the expression 
evaluated by the expression component without modifying the format of the 
received web log data defined by the web server; and 

a logging component for stor i ng to store a cookie associated with a 
computing device, said cookie including a sequence of evaluated expressions for 
maintaining a history of the evaluated expressions to track the sequence of the 
evaluated expressions, wherein the evaluated expression are based on the web 
log data [[is]] received from the computing device. 

Claim 17 (currently amended): The one or more computer storage media of claim 
16, wherein the configuration component, when executed, creates structured web 
log data with enumerated values associated therewith based on the received 
configuration information. 

Claim 18 (currently amended): The one or more computer storage media of claim 
16, further comprising a helper component to parse the web log data received by 
the interface component for use by the expression component. 
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Claim 19 (currently amended): The one or more computer storage media of claim 
16, further comprising an authentication component to obtain user information 
associated with the web log data received by the interface component. 

Claim 20 (currently amended): The one or more computer storage media of claim 
16, further comprising a scheduling component to create a file for use by the 
storage component to store the received web log data. 

Claim 21 (currently amended): A system for organizing web log data prior to 
storing the web log data, said system comprising: 

a memory area to store configuration information associated with the web 
log data received from a web server , said configuration information including at 
least one expression and defining a log cut interval wherein the expression 
specifies one or more operations for organizing the received web log data and the 
log cut interval specifies a maximum size for a web log file; 

a computing device to process the web log data, said web log data 
including at least one condition associated therewith, said condition associated 
with the web log data affecting storage of the web log data, said received web log 
data being in a format defined by a web server, wherein the computing device 
creates and opens the web log file; and 
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a computer storage medium storing computer-executable instructions to b e 
executed on the computing device to evaluate the expression from the 
configuration information stored in the memory area, said computing device 
evaluating the expression based on the condition associated with the web log_data 
prior to the storing of the web log data and storing at least a portion of the received 
web log data in accordance with the evaluated expression without modifying the 
format of the received web log data defined by the web server, said computing 
device closing the opened web log file and creating and opening a new web log 
file based on the log cut interval, wherein additional portions of the_web log data 
subsequently received from the web server are stored in the new web log file. 

Claim 22 (previously presented): The system of claim 21, further comprising a 
web server to generate the web log data. 

Claim 23 (previously presented): The system of claim 22, further comprising 
another computing device to receive the web log data from the web server. 

Claim 24 (previously presented): The system of claim 21, further comprising 
another memory area to store the web log data in a plurality of files in accordance 
with the configuration information. 
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Claim 25 (currently amended): The system of claim 21, wherein the computer 
storage medium stores computer-executable instructions to bo executed on the 
computing device in real-time to receive the web log data and to filter the received 
web log data prior to storage of the web log data by evaluating the expression 
using the received web log data. 

Claim 26-34 (canceled). 

Allowable Subject Matter 

3. Claims 1-3 and 5-25 are allowed and are renumbered as 1-24. 

The following is an examiner's statement of reasons for allowance: Claims 
1-3 and 5-25 are allowable because the prior art made of record does not teach or 
fairly suggest the combination of elements as recited in independent Claims 1,16 
and 21. 

Specifically, the prior art of record does not teach: 

• storing a first portion of the received web log data in the opened web log file in 
accordance with the evaluated expression without modifying the format of the 
received web log data defined by the web server, wherein the evaluated 
expression yields a condition associated with the stored first portion of the 
received web log data taken with the other limitations as recited in Claim 1 . 

• a logging component to store a cookie associated with a computing device, 
said cookie including a sequence of evaluated expressions for maintaining a 
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history of the evaluated expressions to track the sequence of the evaluated 
expressions, wherein the evaluated expression are based on the web log data 
received from the computing device taken with the other limitations as recited 
in Claim 16. 

• evaluate the expression from the configuration information stored in the 
memory area, said computing device evaluating the expression based on the 
condition associated with the web log data prior to the storing of the web log 
data and storing at least a portion of the received web log data in accordance 
with the evaluated expression without modifying the format of the received web 
log data defined by the web server, said computing device closing the opened 
web log file and creating and opening a new web log file based on the log cut 
interval, wherein additional portions of the_web log data subsequently received 
from the web server are stored in the new web log file taken with the other 
limitations as recited in Claim 21. 

The dependent claims being definite, further limiting and fully enabled by 

the Specification are also allowed. 

These features, together with the other limitations of the independent claim 

are novel and non-obvious over the prior art of record. 

Any comments considered necessary by applicant must be submitted no 

later than the payment of the issue fee and, to avoid processing delays, should 

preferably accompany the issue fee. Such submissions should be clearly labeled 

"Comments on Statement of Reasons for Allowance." 
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Contact Information 

Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Thanh-Ha Dang whose telephone number is 
571-272-4033. The examiner can normally be reached on Monday-Friday from 
9:00 AM to 5:00 PM. If attempts to reach the examiner by telephone are 
unsuccessful, the examiner's supervisor, Don Wong can be reached on 571-272- 
1834. The fax phone number for the organization where this application or 
proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 

Patent Application Information Retrieval (PAIR) system. Status information for 

published applications may be obtained from either Private PAIR or Public PAIR. 

Status information for unpublished applications is available through Private PAIR 

only. For more information about the PAIR system, see http://pair- 

direct.uspto.gov. Should you have questions on access to the Private PAIR 

system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

If you would like assistance from a USPTO Customer Service Representative or 

access to the automated information system, call 800-786-9199 (IN USA OR 

CANADA) or 571-272-1000. 

Thanh-Ha Dang 
Examiner, AU 2163 
March 10, 2009 

/don wong/ 

Supervisory Patent Examiner, Art Unit 2163 



